
Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
File: jhF58KNc8HwWKWcmYoZsoAH3W9M.mft (raw, json)
Hash identifier: qwV4F8HgA0Kt59V8Idj0Azjrol+ojtlIcJVkanFt3kM=
Subject key identifier: 84:DC:87:B0:30:45:BC:F4:7F:E4:58:A1:8F:EE:7A:09:B6:06:C6:46
Authority key identifier: 8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
Certificate issuer: /CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Certificate serial: 0199172CBD75CC213528BFE6B87B31D500B4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
Manifest number: 0782
Signing time: Fri 05 Sep 2025 00:00:31 +0000
Manifest this update: Fri 05 Sep 2025 00:00:31 +0000
Manifest next update: Sat 06 Sep 2025 00:00:31 +0000
Files and hashes: 1: EmWFQT9EIlKM8K10K5cWz3oRk8c.roa (hash: mVuZgTV0YIvEIlEbhmtrwLHhCh+ETHzlqM+RSaYL3ls=)
2: jhF58KNc8HwWKWcmYoZsoAH3W9M.crl (hash: svtequT76Bu5RZzZSTkKL91KbxAJBvLJyLmnSPZqm7o=)
3: vOuw-thqqsBDOxSUXEaJasEA7qM.roa (hash: 5FoG4V28mx1fz8vugdFd18SYEUDw3t0Z7vgkJvX8GgU=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sat 06 Sep 2025 00:00:31 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:99:17:2c:bd:75:cc:21:35:28:bf:e6:b8:7b:31:d5:00:b4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8e1179f0a35cf07c1629672662866ca001f75bd3
Validity
Not Before: Sep 5 00:00:31 2025 GMT
Not After : Sep 6 00:00:31 2025 GMT
Subject: CN=84dc87b03045bcf47fe458a18fee7a09b606c646
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9c:0c:76:c5:92:ff:b0:e9:b1:a4:34:c2:f8:43:
94:18:4c:72:a0:79:eb:cb:87:ab:88:fd:61:3b:a5:
c8:84:b6:5e:4c:b5:a0:0a:56:a8:b2:f1:02:a6:0a:
e4:cb:9b:44:da:1b:30:15:2d:57:dc:85:be:c3:34:
97:2a:4f:89:a3:d0:88:5b:7e:65:9f:a0:99:68:0c:
33:a1:c7:df:77:b2:8e:0c:fb:5c:1e:e5:b8:ff:15:
7b:f7:d8:b0:68:d5:26:0a:4b:5d:de:9e:3f:da:ed:
47:96:35:b0:7a:4b:72:b6:64:7d:36:8d:96:27:ed:
ab:31:0d:0d:6e:9d:86:45:49:8f:a8:ed:ba:1f:bc:
70:25:0a:77:cd:7b:33:8c:c0:3a:ea:e2:ba:d8:0d:
7e:cc:2f:0a:ba:8a:5b:2d:0e:69:25:a5:19:2b:b9:
88:d7:38:01:29:c2:1a:6d:70:62:af:8d:49:6a:4e:
35:23:8c:e6:c6:14:17:89:75:22:4b:06:c0:20:0c:
31:9a:7b:63:72:9a:00:5d:95:69:27:a9:10:12:a1:
24:35:c2:ae:b6:81:98:e3:57:0d:e3:0f:6c:65:65:
47:bb:b6:a0:9f:83:6a:d9:a7:ce:68:55:7a:a4:6f:
a9:9b:83:42:07:ee:42:28:02:03:db:a0:f3:cd:7d:
23:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:DC:87:B0:30:45:BC:F4:7F:E4:58:A1:8F:EE:7A:09:B6:06:C6:46
X509v3 Authority Key Identifier:
keyid:8E:11:79:F0:A3:5C:F0:7C:16:29:67:26:62:86:6C:A0:01:F7:5B:D3
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/jhF58KNc8HwWKWcmYoZsoAH3W9M.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/be/ee8f90-ef2b-43c0-b0c0-4cbc67219b4a/1/jhF58KNc8HwWKWcmYoZsoAH3W9M.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
2a:84:85:84:93:d8:c7:3a:9e:dc:5c:4c:d6:62:36:29:ca:0e:
03:03:b5:1e:37:48:a4:6c:e2:49:e1:37:d6:72:50:a4:10:d9:
e2:79:b9:95:03:39:4c:77:6a:cf:0a:aa:67:1b:d5:de:db:d4:
1a:63:b3:b6:84:e7:05:3b:b5:e3:44:26:b0:61:82:bc:e2:1a:
10:5d:23:3f:20:e9:21:51:1c:55:f9:c8:30:45:42:31:5c:3b:
2c:2e:26:f0:ff:fa:28:27:34:bf:59:99:93:4d:e5:c3:f1:4e:
61:4a:12:d2:b1:73:e7:ac:f5:e2:a1:c4:00:9d:d9:59:99:c4:
05:79:c6:68:ab:81:3e:a9:47:1b:01:8f:7d:35:c7:ef:1a:32:
61:77:a7:69:35:f6:ec:cd:76:ce:49:1d:30:74:95:59:54:e3:
98:62:bf:73:a0:bc:ea:86:e2:b4:d9:9a:4c:16:ae:19:bd:a4:
d1:3f:5f:b6:49:33:84:3a:be:90:28:99:bf:db:89:c0:d7:cb:
92:ba:cd:a3:78:d6:10:84:c9:7b:de:96:9f:4d:38:b6:e8:38:
19:fa:fe:9f:ad:88:ee:c2:17:b2:44:94:dc:74:2b:d4:0b:82:
56:80:af:0a:10:2f:6b:53:06:5b:c0:37:0d:0c:50:24:ee:8a:
f7:5c:3e:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 5 06:05:35 2025 by rpki-client